The Cybersecurity and Infrastructure Security Agency has added CVE-2026-124194, an actively exploited Microsoft Outlook spoofing vulnerability, to its Known Exploited Vulnerabilities catalog. Added on November 10, 2026, the entry establishes a November 24 remediation deadline. The warning follows disclosures about Outlook authentication theft involving malicious message files and unsafe external connections. Microsoft Outlook Zero-Day Vulnerability […]
Read the original article:
CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability
